640 matches found
PT-2019-12203 · Gitea +1 · Gitea +1
Name of the Vulnerable Software and Affected Versions: Gitea versions 1.7.0 through 1.7.5 Gitea versions 1.8.0 through 1.8-RC2 Description: The issue arises from the mishandling of mirror repository URL settings in the models/repo mirror.go file, leading to remote code execution. This allows an...
CVE-2018-4429
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2...
CVE-2018-4274
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2...
CVE-2018-4274
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2...
CVE-2018-4216
A logic issue existed in the handling of call URLs. This issue was addressed with improved state management. This issue affected versions prior to iOS 11.4.1...
Input validation
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2...
Input validation
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 12.1.1, watchOS 5.1.2...
CVE-2018-4429
This CVE (CVE-2018-4429) concerns a spoofing vulnerability in the handling of URLs within Apple’s LinkPresentation component. Affected software includes iOS versions prior to 12.1.1 and watchOS prior to 5.1.2, where input handling could be spoofed via malicious content (e.g., emails) leading to U...
CVE-2018-4274
CVE-2018-4274 is a URL handling spoofing vulnerability observed in Apple WebKit components affecting iOS before 11.4.1 and Safari before 11.1.2. The Red Hat and Apple security pages confirm that the issue stems from input handling in URL processing and was addressed by improved input validation a...
CVE-2018-4274
A spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation. This issue affected versions prior to iOS 11.4.1, Safari 11.1.2...
CVE-2018-4277
In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation...
CVE-2018-4277
In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation...
CVE-2018-4277
In iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6, a spoofing issue existed in the handling of URLs. This issue was addressed with improved input validation...
CVE-2018-4277
CVE-2018-4277 is a URL spoofing vulnerability affecting Apple platforms (iOS before 11.4.1, watchOS before 4.3.2, tvOS before 11.4.1, Safari before 11.1.1, macOS High Sierra before 10.13.6). The issue arises from spoofing in URL handling and was addressed by improved input validation. Apple advis...
CVE-2018-20070
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...
CVE-2018-6133
Incorrect handling of confusable characters in URL Formatter in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...
CVE-2018-6100
CVE-2018-6100 : Google Chrome on macOS prior to 66.0.3359.117 is affected by an issue in the URL Formatter/Omnibox where confusable characters were mishandled, enabling domain spoofing via IDN homographs with a crafted domain name. Connected sources corroborate the CVE as a URL spoofing vulnerabi...
CVE-2018-6173
Removed by vendor...
CVE-2018-6167
CVE-2018-6167 is a Google Chrome/Chromium URL spoofing vulnerability in the Omnibox due to incorrect handling of confusable characters in the URL formatter. The flaw allowed a remote attacker to spoof a domain by presenting IDN homographs via a crafted domain name, with the issue tracked under Ch...